List evidence bundles
/v1/trust/evidence-exportsList evidence bundles.
The organization's evidence bundles, newest first, at most 50, in every status (including FAILED and EXPIRED).
Requires an organization owner or admin (403 otherwise). Available on every plan, so bundles built earlier stay listed and downloadable until they expire.
Authorization
AuthorizationBearer va_A platform API key (
va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.
Query parameters
organizationstringrequiredthe organization slug
Responses
dataobject[]The bundles, newest first, at most 50.
Child attributes
idstring<uuid>The bundle id (UUID).
organizationstringThe organization slug.
statusenum<string>Where the bundle is in its life. PENDING: accepted, not started. RUNNING: being built. READY: built and signed, downloadable until expires_at. FAILED: could not be built; error says why. EXPIRED: past its retention, the zip has been deleted.
One of
"PENDING","RUNNING","READY","FAILED","EXPIRED"start_timestring<date-time>Start of the period the bundle covers (ISO 8601 date-time).
end_timestring<date-time>End of the period the bundle covers (ISO 8601 date-time).
errorstringWhy the bundle could not be built; FAILED only.
file_namestringThe zip's file name, evidence-{organization}-{start date}-{end date}.zip (dates in UTC).
sha256stringSHA-256 of the zip file, hex; set once READY.
bytesinteger<int64>Size of the zip file in bytes; set once READY.
key_idstringId of the key that signed the bundle; set once READY. The public key is at GET /v1/public/trust/evidence-signing-key.
regionstringThe AWS region that built the bundle; set once READY.
created_bystringWho started the export: the user id, or api-key:{key id} for a platform API key.
created_atstring<date-time>When the export was requested (ISO 8601 date-time).
completed_atstring<date-time>When the bundle was built (ISO 8601 date-time); absent until then.
expires_atstring<date-time>When the zip is deleted and the bundle becomes EXPIRED (ISO 8601 date-time), 30 days after it was built; absent until READY.
download_pathstringPath to download the zip, relative to the API base URL; READY only.